Hello,
We're trying to solve a problem related to the security of the data within a sas dataset (.sas7bdat file), we have a bunch of tables on a directory on a linux system, and we have different bussines segregation info in the datafiles, we would like to know if there is a solution to allow sas to restrict the access to this data for different users, for example: dataset clients, has information about clients from different geographies and i need to let user1 to get data from french clients and user2 spanish clients.
Data is segregated by a column with the nacionality of the client. without separating the dataset into 2 datasets, is there a way to restrict this dataset access?
thanks
@W1ndwaker - I was thinking a DATA step view might be worth looking at. You can't do a DESCRIBE on those.
Hi @W1ndwaker
If you are using Base SAS, then this feature is not available out of box and you'll have to fudge it somehow. Here is a response from 2018 about the same request
code to implement row level security to data set using enterprise guide
Alternatively, you may want to try out SAS Federation Server if that's an option?
Hope this helps
Federation server doesn't seems to be my best option, but reading on the post you gave me i found something that can work out, seems tricky but possible!
I'll work on it and see if i can get a solution on my own that fits the situation, in this case i'll try to post it here.
meanwhile will be hearing new comments.
Thanks!
Do you have metadata server in your deployment?
If so, you could use meta-bound libraries to impose row level access.
However, this is not supported in Viya, so if you are planning to migrate soon you should look for other options.
Like, having data stored in a database that support row level security.
Do you have metadata server in your deployment?
If so, you could use meta-bound libraries to impose row level access.
However, this is not supported in Viya, so if you are planning to migrate soon you should look for other options.
Like, having data stored in a database that support row level security.
FYI, if you are looking for information on metadata bound Libraries, here's the documentation link and a link to a 2018 SAS Global Forum paper:
SAS Help Center: SAS® 9.4 Guide to Metadata-Bound Libraries, Second Edition
Also, Viya supports Row Level Security for CAS tables.
Carl Sommer - SAS Technical Support
How are you identifying client nationality? As long as that data is available in SAS, one solution would be to create views of your datasets containing a WHERE condition for nationality. Allow clients to only use the views to access the data by password-protecting the underlying real datasets. The views can contain the password to read the real tables, but that would not be available to the clients so they can bypass the views.
@W1ndwaker - I was thinking a DATA step view might be worth looking at. You can't do a DESCRIBE on those.
The SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment.
SAS technical trainer Erin Winters shows you how to explore assets, create new data discovery agents, schedule data discovery agents, and much more.
Find more tutorials on the SAS Users YouTube channel.